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(57)[ABSTRACT OF THE DISCLOSURE] 



MM] [SUBJECT OF THE INVENTION] 

WWWf- £X%&Wt*oC Alteration detection of Cookie by the side of 

p o k i e <D&gA/Mt#, ~C Q WWW service provision and detection of copy 

o k i e co a" t°— ig/E coM tH % use of Cookie are enabled, illegal use of Cookie 

*>lW>'t L., Coo k i e (D^flE is prevented, and security of WWW service is 

$W £B£lh ItWWWt-t^ maintained. 

[PROBLEM TO BE SOLVED] 

WWW if — Irfll'&T <5"ff If there is service request from user terminal 2, 



12/26/2003 



(C) DERWENT 



JP11-98134-A 



— t'^g^fcS <!:, Cook 

i e \c-m~£tcte%ffe<D\nm* 

9 J Cooki eiDf-^ii 
* 2?5^Co o k i e fc^jfl" 

tz, «LTV\6WWWf— t' 

t£Sr, Coo k i e^M^Ptfc 
-il £ ti WtoMtofflbXi £iX 



THOMSON 

DERWENT 

by adding a series of or specific information to 
Cookie, adding digital signature to it, and 
enciphering, computer 1 which provides WWW 
service will conceal data structure of Cookie, 
and will be sent. 

If Cookie is received from user terminal 2, it will 
be decoded, and digital signature will be 
extracted and verified. 

Moreover, the uniqueness of relationship of 
WWW service item and user who provide is 
checked using a series of or specific information 
added to Cookie. 



2-y <Wt<* 




1 - Computer which provides WWW service 

2- User terminal 



-- start request for games-> 
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Consecutive number 
The following area number 
The total acquiring point 
~> signature secret key 
Digital signature 
Encryption | Code following 



game implementation <-- point game HTML 
I 

Acquiring point (20) 
3- 

Encryption | Encryption key 
Series code 

The following area number 

Acquiring point (D) 

<--> signature verification key 

Digital signature 

Encryption | Encryption key 

game implementation <-- point game HTML 

immMomm [claims] 



Lxmfttzmut, mm^ 



[CLAIM 1] 

Alteration * copy detection processing method 
of cookie wherein, in method of performing 
succession of data during transient control and 
transient service of service with which user is 
provided by computer which provides WWW 
service using cookie, it has 
process which adds a series of or specific 
information to cookie, process in which data of 
cookie which added at least the 
above-mentioned a series of or specific 
information are enciphered and sent, process 
which decodes cookie when said enciphered 
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if ITV^WWWt- tf^^l cookie is received, and process in which the 

i t £Uffl# b <DM%V> — uniqueness of relationship of WWW service 

MIE^ y3r— \c~tt1)W L/c— item and user who provide is checked using a 

fcfi^^E .fcoTfift series of or specific information added to said 

frfSiiStSrWU WWW1J- cookie, 

— \f^(D±^-^.V £r#tf?H" and security of WWW service is maintained. 

• 3 l tr-tfeffltoa^r'fej 



[ft#*f 2 ] 

WWWif— £ fr 

fi^totif let Lfc* y ^ 

mnt, MWi^P ? yy^&z 

WM Ltz 9 "z&r'Q [T- £ %M 

mt-t. 6 mnt : mr^t^ 

Pf r i&ffc L- tz - £ g{f Ltz 

#^©tim k <t o tr^t s is 

-t? * * y 7 1 zmft-fz z. t & 



[CLAIM 2] 

Alteration * copy detection processing method 
of cookie wherein, in method of performing 
succession of data between transient control of 
service with which user is provided by computer 
which provides WWW service using cookie, and 
service, it has 

process which adds a series of or specific 
information to cookie; and process which adds 
digital signature to cookie which added said a 
series of or specific information, process which 
enciphers data of cookie which added said 
digital signature, process in which enciphered 
cookie is sent, and process which decodes 
cookie when said enciphered cookie is 
received, process in which extract digital 
signature from decoded data and digital 
signature is verified, and process in which the 
uniqueness of relationship of WWW service 
item and user who provide is checked using a 
series of or specific information added to said 
cookie, and security of WWW service is 
maintained. 
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m^-r <t , » Vt Vl v 5 

wwwt- t^^s a i <b 

Ltz £ £ £<KM& £.T £ 7° 
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[CLAIM 3] 

Program store medium that stores program 
which makes computer perform processing 
which is program store medium on which was 
stored program for detecting illegal use by 
alteration or copy of cookie performed by 
computer which provides WWW service, and 
adds a series of or specific information to 
cookie, processing which enciphers and sends 
data of cookie which added at least the 
above-mentioned a series of or specific 
information, processing which decodes cookie 
when said enciphered cookie is received, and 
processing which checks the uniqueness of 
relationship of WWW service item and user who 
provide using a series of or specific information 
added to said cookie. 



www*- 1** %mm-r:<5$f 
mm mm-t z> tz my* ? ? 

A£f5tt Ufc^p ^3. AfE"M 

tz izftfeoffimztimi-z&m 

T'4 fcttflU Ltz ? y 



[CLAIM 4] 

Program store medium on which is stored 
program for detecting illegal use by alteration or 
copy of cookie performed by computer which 
provides WWW service, 

processing which adds digital signature to 
cookie which added said a series of or specific 
information, processing which enciphers data of 
cookie which added said digital signature, 
processing which sends enciphered cookie, and 
processing which decodes cookie when said 
enciphered cookie is received, processing 
which extracts digital signature from decoded 
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-t&$i&b, HufEBf-^HbL/t^ which makes computer perform processing 

y :J r— ^Sff Lit b%K2 y^r which checks the uniqueness of relationship of 

— ^^.^rir^^Mt, Ltz WWW service item and user who provide using 

T — v ? ^A'ih€i £rtt a series of or specific information added to said 

tiJU *S9'/V&&&titifcf cookie. 
Ztimt, if LX^5WWW 

<d-m&*, mz? y*-ttf 

mWmtMKMW] [DETAILED DESCRIPTION OF THE 

INVENTION] 



[0 0 0 1 ] [0001] 

mW^j&f Z&WMf] [TECHNICAL FIELD OF THE INVENTION] 

&3§Mte, ^- ,,lC o Q k This invention relates to program store medium 

i . e.) '0j&g'&W£JfW¥^ % , on which was stored program for implementing 

T 4 . i?#./tM&W0, . method of detecting alteration and copy of 

W IIP dip k f.e ^'(p—M'^ tz. cookie (Cookie) by providing of digital signature 

li^M&MW. .Mil. iDW-^Ri technique, encoding technology, and a series of 

<£ <9 ZiFifoZ or specific information (number) on Cookie. 

5 fc & <D :/ p ^ 7 ^ 

m l ft -/ n y f i» tmmm^ m 

[0 0 0 2] [0002] 

mmomn [prior art] 

C o o k i e li, WWW (World Cookie is information used in order that WWW 
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Wide Web) f-— \?x SrttH&'f server which is computer which provides WWW 

5 tr^^T*fo-5WWWif — /< (World Wide Web) service may perform 

#s fiJffl#{d£§ift1"'5 if— k** succession of data between transient control of 

(DM&(Offl'M, if— t?xF£\X*<D service with which user is provided, and 

x — 9 <DM&$:?i 0 tz.tib\^^ service, when WWW browser accessed WWW 

5 If 19 , WWW^y server, it is sent to WWW browser from WWW 

: ^wWWt- s<\z.T?-te'x Lfc server and WWW browser accesses WWW 

i^cwWWlf— /^ ib WWW T' server after that, is embedded at HTTP header 

7 £ if £ ft, -t<^^, W and transmitted to WWW server. 
ww^7 ^-Wwww-tf- — 
T9-tx-fZ>b%\z, HTTP 
^ 5/ ^fcfflifcii* ftTWWWfl 

[0 0 0 3] [0003] 

^jfc, wwwt-^^ f> WWW Since Cookie sent to WWW browser from 

7'7 ^It^ tifcC p. o k WWW server was formerly described in user 

i efi, HJ'ffl#$*fc:J3VYC, terminal by specific file which WWW browser 

WWW:/ 7 ^ifco^fe-S^^co defines and overwrite and copy were made by 

yrJMtUW& fc, terminal user, WWW server was not able to 

fCiotftlx.^ 3 t°— ^ detect it, even if it rewrote and copied Cookie 

"Tnl'Cfo'Sfcfe, WWWt-^ which received. 



[M^«Lcfc 9 if-f6s£ [PROBLEM TO BE SOLVED BY THE 



Co o k i eO^T$iJjB#0 In provision of WWW service which controls 

■f— fc^cojl^^rftiiJIiS-f -5WW transition of service of user using Cookie, by 
WIT— tf;* ©ffi^ & v^f , conventional method, when user overwrites 

^tf^&Tii, fUfll#/i s C o o Cookie, WWW service is controlled unjustly, or 




[ 0 0.0 4 ] 



[0004] 
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k i e 9 when user copies Cookie, and hands third 

?FIE}cwWWf— t"^ SrfliWL person or third person does monitor of the 

tz'O , %\%%&c 6 o k i e £ Cookie on network, it acquires, and there is 

=i t°— L, BE^f-iS^^fc problem that WWW service can be utilized 

fiHH#/5^ y h !7-i? ±T*C irregularly, 
o o k i e t 
=fc<9A#Lfc <9 LT, TFEICW 
WWt- tf* 5 ^ t # 

[0 0 0 5] [0005] 

^IPJlte, ±!Ecofp1M^-^ It is providing means this invention's being 

X ft £ tifr h. <DX, (DM tf) t made in view of the above-mentioned problem, 

•f^> tZ.hU., WWWt-t^ and place made into the objective enabling 

fiiJt-fllWC o'o k i e.cotfc£* alteration detection of Cookie by the side of 

ttS . C o o k i e co = tf— WWW service provision, and detection of copy 

V> C o o use of Cookie, preventing illegal use of Cookie, 

k i e0^jEfflB&B£LXW and maintaining security of WWW service. 
WW if — if * <D.± ^a- D t -*(. 

[0 0 0 6] [0006] 

[M^«1-/5 fcfc(0#S] [MEANS TO SOLVE THE PROBLEM] 

±IE @ ift £r iii^i" 3 fc #> , Since the above-mentioned objective is 

#|f£, Cooklellf-f^ attained, this invention enables alteration 

/^H£ Srffi-j&fi-f -5 - § W detection of Cookie by the side of WWW service 

WWt- ¥x$k1&WX.(b C o o provision by adding digital signature to Cookie, 

k i e(£&£A/Mt±S, Cook and detection of copy use of Cookie by 

i e ^©-Itf §4K15.C consecutive-number providing to Cookie, 

o o k i e CO.? t°EMW£>Wl£i combines with encryption of Cookie, and 

&^&b_ir&k<£>X,~ Co o k enables it to attain high security, 
i ' e <b0%-ik£.W-&, M V * Specifically, for example, as follows, it 

a. D z -i. &MM L#5 Xb It-ft processes. 
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[0 0 0 7] [0007] 

WWWt- fcT*£fll#H~&£Mff Computer which provides WWW service is 
fiSfi, T J.i/? information and the only consecutive number 

5.fcfe©i^S^ii f>f which opt for the next service request of user 

£^fiET5 O><0^fetl when it has secret key for signature verification 

juEjt & <fc tyBf-^fkW'fcfeOigJ^ key for verifying signature secret key for making 

£t£r£f*>, digital signature, and digital signature, and 

(^i^^t*XfUfflS>fei'5feofc<b encryption and there is service utilization 

£ ? f iJ^#(7)^cof-— hfXg"^ request of initial stage from user terminal, when 
^Sfc^i^Sfil ^fc JitPft— there are data which acquired from user more, 

£ ^(c^Jffl#^bA¥ digital signature is made with signature secret 

Ltc^—^& foZ) 'H # <£> key to data aggregate containing the data or its 

x — $ H ^ ^ & initial-stage data, and it enciphers with secret 

t&f u £ ^lln* ^ L $5 key of encryption with the above-mentioned 

W$l 9 ^.i^ffc data aggregate, and sends to user terminal as 

U ±IET-^^ft^*^Bt Cookie. 
^b0M$t^R£-^bU C o 

okiet LT^lJffl#JS*lCiil 

[0 0 0 8] [0008] 

WWWf-fc^^tif Moreover, when there is service transient 

5f+^#g}$,. ^Jffl^ffi^^f: request from user terminal, Cookie which 

r-K^'l^i?^ 5 fcoTcii, received using secret key of encryption is 

^^itO^^M^B&^i^V decoded, digital signature is verified using 

fee o o k i e M% signature verification key and signature 

ffiWcM&M^X'T* d i/^lvWiM verification goes wrong, computer which 

SrlEL, f^^IBc^frLfc provides WWW service considers that alteration 

iHH-fi, fiM#£^ftME# of Cookie by user or third person is performed, 

l:J:5Cook i e (D&gAstf and stops service immediately. 

fr'frfotck 'frtt LT't^.t? ^£ When successful in signature detection, it is 

tt*?(v.f^ibi"S 0 W^^Hifc^ regarded as normal service transient request, 

^Lfcll-a {-fi, lE^&f^tf digital signature is made with signature secret 

*5if£§l3ft i frfe U ^iJffi^O key to data aggregate which acquired from data 
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£ '^^jJt^r^J^li" 5:r which control the next service request of user, 

— ~$ , 5Hf LfcC o o k i e £ consecutive number of the same as Cookie 

<D— iiHt^jo SLiJ^W&fr which received, and user, and it enciphers with 

bA^lstc"?—? <£>H"n (cML secret key of encryption with the 

H£ Sf^H'Cx 'fv 5 ^ /^If £ £r above-mentioned data aggregate, and sends to 

ffr& U ±l£x — £ <£>^"n <!: # user terminal as Cookie. 

Cookiei LT*IJffl#» 

[0 0 0 9] [0009] 

WWWt- if Moreover, computer which provides WWW 

Stt-lfttHi;, jfiJffl#Sffi*A»f>"^ service records consecutive number which 

— t^jg^g^t^fcofc i acquired from Cookie which received when 
^{f Ufc Cook i e £. A¥- there was service transient request from user 
L/c— 3S#^£r if — tf ^ISsSOfW terminal with service discriminative information, 
fRir&iyffi^U ZthUtik, — and after this, if the consecutive number same 
o©f- t'XflfcSij'IfiU^.l' 2 twice or more is recorded to one service 
SJ^JilWI— 0}— jS#-^!E$?:£ discriminative information, in the service 
fojtvviifif,. ^co— jS^f"'— transition of a series of, third person will copy 
XjS^i'fc^TfS^f^C o p Cookie and will consider that illegal use is 
k i e £ = t°— b^IE^i/n^tr performed. 

[0 0 10] [0010] 

•r-r ^/i^-£<£>ffr&:Jo In particular, if ESIGN (Efficientdigital 

.fctftfeSEliW:, 0fl*.liE S I G SIGNature scheme) is used, high degree 

N ( Efficientdigital SIGNature security is realizable for creation and verification 

scheme) &fflv»<5£., HHStft* of digital signature at high speed, 

dfaijry SrUfi ji^H^i" £> £ Moreover, when FEAL (Fast data Encipherment 

So Sfc, Rt^b#3cfc ALgorithm) which is procedure public 

XJ^^iUU-t, &\7L\£^W£ffl presentation, for example, type high-speed 

M<DfaW$B s^^' V XJ*X encryption algorithm is used for encryption and 

% 5 F' E. A L ( Fast data decoding, since high-speed processing can be 

Encipherment ALgorithm) £rffl performed, it is desirable. 
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[001 1 ] [0011] 

SX±(Df^M^W^^ :=1 'y^^- — ^. Program for computer to implement the above 

(cJ:oT^^"t"'5fcfewyp if processing method is storable in suitable 

y Mi, 3yt°a-^^^|! storage storagemedia, such as portable 

0 ^t£#" i5 TjMWM ^ y, ¥^ medium memory which can read and do 

]) , s<—yT 4 computer, semiconductor memory, and hard 

&m i KmMMmmmtt z disk. 

[ 0 0 I 2 ] [0012] 

[M BJ QMWcoMWi] [EMBODIMENT OF THE INVENTION] 

VjyZMMWM\^X^WB?}M Hereafter, concrete Embodiment of this 

W&) tzMMtiMMlt^y^XWft invention is illustrated using drawing, 
rf & "ZM 1 1%MW% FIG 1 shows example of composition of system 

^Z^^Mffcffl&M^ which implements this invention. 

[0 0 13] [0013] 

gjrfi, i (iwwwf- SrH In the drawing(s), computer (WWW server) by 

{ft-f"31H-IW& (WWW-f— , which 1 provides WWW service, and 11 are 

1 1 (iWWWih— t"^.60f"— service programs of WWW service, 12 is a 
^^^7^.1 Ifflil® consecutive-number management part which 

tfx ^sitfcM LT C o o k manages consecutive number which provides 

i e — jiES^-^ to Cookie to service request of user, 13 is a 

■f^^MW^MU,. TS'MQ Cookie generation part which forms Cookie, 14 

0 o k i e "|-4^?',§. C o",Q.'k is a Cookie verification part which verifies 

1 e^j&gfS", 1 4 SCooTi whether alteration * copy of Cookie is 
e. <D& ^ t'ir'^MIfelT'K performed, 15 is a signature creation * 
v vft v \fr> ^ 5 ^r^lE-f o verification part which makes and verifies digital 
o k i e^IE^, 1 5 lie o o signature which provides to Cookie, 16 is an 
k i e [i^gf l,'^ ^^/vi encryption * decoding part which performs 
& £ iff&SS J; tf&SEi" 5Sf £ f£ encryption and decoding of Cookie, 17 is a 

• WIEmP, 1 6 iJC o o k i HTTP daemon who controls transmitting and 

e©B&^ffc:i8«fctW£^fl5£?f 5 receiving of data based on HTTP (Hypertext 
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Pff • W.%itU, 1 7fiHT TransferProtocol), 18 expresses 

T P ( Hypertext consecutive-number maximum-value 

TransferProtocol) (c <£ -5 t — # management file for storing maximum value of 

OiiSHf %Mffl1rZ) H TTPf consecutive number which provides to Cookie. 

— 1 8 liC o o k i e \Z. 

[0 0 14] [0014] 

• 1 5 #M£JBT Signature secret key for digital signature 

§f ^ f'Ncffl » M% creation and signature verification key for digital 

ffl&M tT'sd?? #?EEjfi signature verification which signature creation * 

(nWi&ffiMM, So.it^Bf-^-ft • verification part 15 uses, and encryption key for 

t£-*Hbg& 1 6 *s^ffli"5Bf encryption which encryption * decoding part 16 

MWa^MH, ftllirof-f uses is maintained on disc of computer 1, or 

* £ fc ti * ^ 3 ± ft memory. 

[ 0 0 15] [0015] 

£ fc, 2 {iWWWif — t'"^ Sr-fU Moreover, 2 is user terminal using WWW 

IT5fiJfflfM^"'2lSfW' service, 21 is browser for performing display 

WU— hf* «fc ottlft £ ft 5 and input of information which are provided by 

fn#©^-fc cfc tfA^J WWW service, 22 is a Cookie write-in part 

7 £ If, 2 2iiCook which writes Cookie in fixed file etc., 23 is a 

i elIf(D77^/^Ji|t Cookie reading part which reads Cookie in 

&tf C ook i e 2 order to notify Cookie to computer 1 which 

3 ftWWWt- t'^?:'Iif 5 provides WWW service, 24 expresses Cookie 

W-Jlttl l(;Cook i e £ii£a storing parts, such as fixed file which saves 

■fS/tfeJvC o o k i e Cookie. 
i&tfC ooki em&fyW, 2 
4l2Cook i e fc-fi^-fSBf 
£(D77^>"'fWC ook i e 

[0016] [0016] 
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Cookie iti£#-£|5 2 2fcJ: Cookie write-in part 22 and Cookie reading part 

(/Cook i efjc&<^£|5 2 3 23 are functions built in browser 21, and 

(i, zfy 2 1 {CF*}U£;ft,T browser 21 of Cookie storing part 24 in which 

l^<SttM£"C?*>0, ^7^f 2 1 Cookie is stored is file of 

j&s, 0»J&fi#gN e t s c a p "-Netscape¥Navigator¥Cookies.txt" when it is 

eCommun i c a t i o n Netscape Navigator which USA 

sli^M^lfcNe t s c a p NetscapeCommunications developed, 

e Navigator X*hZ> Moreover, when browser 21 is Internet Explorer 

'SMh Cook i e tf&fth£fri, which USA Microsoft developed, Cookie storing 

SCook'i elW24li part 24 is file of "¥Windows¥Cookies¥XXX.txt." 

r . ". : ~ 

Netscape¥Navigator¥Cookies.t 

xtj . . <D 7 7 -T. /^X*h'Z>o. £ it', 
7" 7 9¥2 1 #, i^SM i. c r 
o s o f tfttmftLtc I n't 
e r n e t Ex p 1 or e r 
C p o k i e 2 

4 ; .... .... . . li 

r ¥Windows¥Cookies¥XXX.txt 

[001 7] [0017] 

H 2li, ^BW^— MMMM<D FIG. 2 is figure for illustrating effect of one 

VfM % U£ W "t" -5 'fc #> <£>HIT*£> embodiment of this invention. 

5o. ^flJfe^fi W, WWW In this Embodiment, computer 1 which provides 

f - — bf * 6 ftWMi WWW service shall provide user terminal 2 with 

fi, v v < o&o&'flaWfcifi^.S: game for every point of form which game 

MW U te&h f — J*tfMffl-?6 expands, while shifting some pseudo points. 

So 

[0018] [0018] 

^iJfflU'ffiJfc 2 P> -7 s — i=> <£>|i#? If start of game is required from user terminal 2, 

%m$:-rz>b, H-Iilttt, by computer 1 

f-t^7°nf7Al l(DWM On basis of control of service program 11, 
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(Dhtlz., — 1 2 consecutive-number maximum-value 

{ci <0— ii#-§-f::*:ffii c 3:7 7 management file 18 is read by 

-f/H 8 £tft#-i£/v"C, ffM(c consecutive-number management part 12, 

^ Wlgjfc 0ft— &— liH^ consecutive number only is anew provided only 

^fl-jfl^ itk\z.?toSf— J*<Di& to this request, next, point identifier (the 

MWlftft following area number) of game to perform is 

U BW&&Z fflMWH£i~£>o decided, and initialization of the total acquiring 

. C o o k i e <D$LMt& point is carried out. 

fc-oX, c;opk.i e4ill Next, in generation of Cookie, Cookie 

3 It^faW-ffi. • ^liE^P T 5 generation part 13 calls signature creation * 

OT.U — ii#7ir, ^ifePS??, verification part 15, to three data ensembles, 

UW&&<0 3 o©f-^ip , t consecutive number, the following area number, 

^J-L, E S I GNOf^Sil and the total acquiring point, makes digital 

\z. X <9 '¥ 4 W %i¥f& signature with signature secret key of ESIGN, 

L, £ b • "tfi^bM. 1 furthermore, calls encryption * decoding part 1 6, 

6 £Pft/|±J_U-t , FE A tfcft enciphers them with FEAL encryption key, and 

& y.Z fib .£ M^-ffi C, ! C forms Cookie, 
bo.k L e ^r^j^-f So 

[ 0 0 1 9 ] [0019] 

& }o\ CD C p o k 1 e ©t ^ Furthermore, about ESIGN (Efficient digital 

W^kSWfoMf&SWfcMM SIGNature scheme) used for creation and 

Jfj v ^ 5. ESI G N ( Efficient verification of digital signature of this Cookie, 

digital SIGNature scheme) Mo there are Unexamined-Japanese-Patent No. 

vyCfi, #%^CMt tT", 0"JxJ 62-113191, Unexamined-Japanese-Patent No. 

tfJftfflBB 6 2-1 1 3 1 .9 i:€ 01-147585,03-129384 as bibliography. 

^HfWO.l - 1 4 7 5 8 Moreover, about FEAL (Fast data Encipherment 

5 %fffl¥- 0 3 - 1 2 9 ALgorithm) used for encryption and decoding of 

3'8 4f»fc5o tt C Cookie, there are 

o o k i e '£>Hf ^ftloWlf Unexamined-Japanese-Patent No. 

{fc{iffl^<5 FEAL (Fast data 60-196059,61-200778 as bibliography. 
Encipherment ALgorithm) Mo 

v^.Tfi, #«^<b.L-c, mm 

H§6 0- 1 9 6 0 5 9 

MPS 6 1 -2 0 0 7 7 8 #4* 
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10 0 2 01 [0020] 

W±(0 i^Cttf'f >W Cookie3 which digital signature was provided as 

£Srtt-4LTP£-SHt;LfcC o o mentioned above and enciphered is sent to 

k i e 3 ^M,£tf>^— ^ user terminal 2 through HTTP daemon 17 with 

$r^fft'5HTML77'f^t HTML file which performs game of said point. 

So 

[0 0 2 i] [0021] 

^iJffl#iS^" 2 tii~ ^ 7 ? if 2 At user terminal 2, if browser 21 receives HTML 

1 (Ccfc 9 HTML77-f^i C file and Cookie3, Cookie3 is saved in Cookie 

o o k i e 3 ^ jf 1l $ if, jQ storing part 24 from Cookie write-in part 22. 

o o k i eM&%W2 2X5] 
C I o o~k i e IPfi W2 ~4~M C 6 
o k i.e.3iMf Sd 

[0.0 2 2] [0022] 

& I ' , #J ffi 2 T^Jffl Next, in order for user to perform game at user 

Wrr 'IkWx Xii:M^MM(D^i terminal 2 and to perform game of the next 

r ^ OllSIIiltll'Ii point, when publishing request to computer 1 

1 KMMW$&R ^%M,II£ olo again, Cookie3 is read from Cookie storing part 

k i e.0l£i&&8&2 SltZ& 'Q C o 24 by Cookie reading part 23, and acquiring 

0 k i e feffl]t$ ~2 4 ty.h C o o point of game acquired this time and Cookie3 
k i e ,3^MI±lI,! ^lElIi are sent to computer 1 . 

1 e 3^||-Iil^f5 0 

[0 0 2 3] [0023] 

§'tl?0 1 rcrii. TH T T P't-^ By computer 1 , if continuation request of game 

'yi jS^LxMM^M^Z ti^ from user terminal 2 is received through HTTP 

b <D#— A CD flfelft il^jSrlS U S daemon 17, service program 11 will call Cookie 

t , f-— tr^7°P ^7i l ,l.li, verification part 14. 

C o o k i e l^liElfP 1 4 Sr^tJ 5 Cookie verification part 14 calls encryption * 

tij-f o Cook i e %&WtM 1 4 decoding part 16 first, and decodes Cookie with 
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I*, S-fRf-^ft; • M^rfcU 1 6 FEAL encryption key. 

LTF E ALPt-£Hg{c After that, Cookie verification part 14 calls 

<fc 9 C o o k i e &W.T=ri~&o signature creation * verification part 15, and 

ZcDflk, C o o k i e^aEgpi verifies digital signature with ESIGN signature 

4 it,' ¥£fMt • tfefjEgjTl 5 £ verification key. 
iWtli L, ES I GNl-^^II 

[0 0 2 4] [0024] 

-t—t'^^uy^ A i l (i, r When verification of digital signature goes 

^ ;v^^<D^M.\z.^M\,tc wrong, service program 11 considers that 

led:, C o p k i e tfik'g Cookie is altered and cancels service 

h £ titc t "L"C.ii*>{vf"r- continuation immediately. 

fc**Wr£:W "MTo ^SEit^ When successful in verification, acquiring point 

5b Lfc t % \t \f ,.MWi%MM 2 sent from user terminal 2 is added to the total 

'fr h 'Mtt £ titcW&£\%UW& acquiring point, next, point identifier of game to 

iKtcAUl? U '&ltfr o perform is decided and consecutive number is 

S&£XVf:£ik7£ C, ^(t Lfc extracted from Cookie3 which received, digital 

C o o k i e 3 signature is made with signature secret key of 

$3 Hi U Zfob <D. 3 o©r- $ ESIGN by signature creation * verification part 

W&$tM'XZ 'M&ffi&ZMffiM 15 to those three data ensembles, it enciphers 

1 5 ^ <£ o "C E. S I 0 N <DM% using FEAL encryption key by encryption * 

I>fil;.£^.'x 4 ¥?^M& S? decoding part 16, Cookie3' is made, and it 

jf1=J$ : .U Iff. ^EX^MfcWO sends to user terminal 2 with HTML file which 

ivQ; .9 T E AI Bt^HSr JSl s "f performs game of said point. 
WWitL , 7C P. p k Ye. 3' ■& 

tTl~5 HT M 17 7 /tr #1S 
*|JJB#«B* 2 

[0 0 2 5] [0025] 

±IEK>*0;Si?^'ff LfcC o p k When consecutive number extracted from 
i e 3 ^ibttffi.Lfc— Cookie3 which received by the 

\t, ^ — A <t trl£ above-mentioned processing is recorded on 

^ 1 Y*>f-fB^:L, M, disc of computer 1 with identifier of game and 
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<D— 1 Al^S'J^f- several times of recording of the group of the 

^>M/0^^:[IIIE^: $tiTV^c^ same consecutive number and game identifier 

^•{Cfi, Cook i e <D7f~Bit£ is carried out after that, it is considered that 

3 t°— ifi & £ fctz t fyt£lr 0 illegitimate copy of Cookie is made. 

[0 0 2 6] [0026] 

U±<D^M<Oj^Wi"^liX, Coo In the above Embodiment, cookie, normal 

kietcfct), #Jffl#£>y— A implementation is formed by controlling 

%M&&(DM&bUW&M<DMZ transition of user's game implementation point, 

ifcSrf+3|^ i (D^£3e.MXMM and recording of the total acquiring point by full 

-f 5 Z t XlE1%teMMfr i J$, U.'Sfc initiative of computer 1, alteration of game 
o'f '&.O "," "Wffl#fc<fc implementation point by user and the total 

MMMMMX X$MM'&M<t>M£ acquiring point is made detectable by computer 

A7£; T 4 i? $ . 1 by adding digital signature. 

[0 0 2 7 ] [0027] 

f£$3, MBMUM.ZXWET^ £ Furthermore, acquiring point of game of result 

MM Utz1feM<vtf ~ A0W&& which implemented game at user terminal 2 is 

Cook i e "3 £fiS!J}iff sent to computer 1 apart from Cookie3. 

JliSI No process is performed at user terminal 2, 

2 T*fi, . C oo k i e 3 including encryption * decoding only by saving 

■fZWX^ik -M^kZ^ Cookie3. 

—fflfrtitoXfcft&fifro $\ For example, although alteration of game mark 

co^E (v*5 ft S ^ in user terminal 2 is prevented by carrying out 

-^©i^"'!!!!^^ scramble of the mark within game program 

K P — Ki"$^—'rfe7 P c? ^ which downloads from WWW server in the case 

7"A'rtt^S € * 7 of game in this Embodiment, it is not matter to 

5 £ .£ V MB.%MM2l£; which alteration prevention of Cookie is 

if 5 A <P & £ A, & K independent and this is directly related. 
£L.XV^f)K. ZfrltC o o k 
i . e 0'3fe c^BSlt £ m^L t T 
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[0 0 2 8] 



[0028] 



H3fi, HI 1 \z.7jk1--y-—t?xy FIG. 3 is processing flowchart of service 

p 1 1 (DfaM? program 11 shown in FIG 1. 

— YX*h& 0 ^f5/7°Sl Tii, In step S1, it judges whether it is initial-stage 
% |J ffl # JS* 2 ^ ft access to request from user terminal 2, and if it 
U WR7 ?-txfrt* is the first access which requires that game 
^ L, MtzKsf— ix£P!£&-f 5 should newly be started, it will progress to step 

t £rH:£1~ 5iD©7 S2, consecutive-number management part 12 

Xfotilt, 2H1^> will be called, and unique consecutive number 

— iiS-PrWSfG 1 2 £ iWHj will be provided to request. 

U !g^(£ft C"t^-~— ? After that, it progresses to step S6. 
"S „.'" . 

[ 0 0 2 9 ] [0029] 

T#±x ti ft*, " * If it is not initial-stage access, it will progress to 

•;/ 7° S 3 ^M&, Cook i e step S3, Cookie verification part 14 will be 

tfcftgBl 4 ^rfft/tt'i LT. C o called, and it will confirm whether to be that by 

o k i e g /w^ fCtc X which Cookie was altered. 

ftt^&^.is'^i'So. Moreover, it confirms collectively whether be 

C o o k i'.e^.^-^Jifci that which copied Cookie. 
<DXt£\ s fr¥ o fchffi'&X'f- Check of this illegal copy records group of 

y. y-f&o ^.O^-lE^ ^—^ f- consecutive number extracted from Cookie, and 

■cy^f*. fflz-lfC p o k i e game identifier (the following area number) 

frbMtti Ufc— t 'tf—J* each time, and can be performed by examining 

Wffltt. 'cdM.&Z. whether group of the same consecutive number 

coMHIEM t/CM',' P— "^-i and game identifier is already recorded. 

Z~ F(Z~£ *)M oZ &XE 

So 

[ 0. 0 3 0 ] [0030] 

*x ©^J^C cfc <9 , C When evaluation of step S4 alters or copies 

ook'j e ^E&^A^fcfi'^'i? Cookie, it progresses to step S5 and service is 

- £ ftfc t> cDT'fo stopped. 
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*t -y 7°S 5 ^i§<^, f*— t'^. If verification is O.K., Cookie generation part 13 

Srcp iL-f"5 0 ^K^OK-efctv will be called by step S6, and Cookie will be 

fi, xfyT'S 6 {c <fc <9.C o o formed. 

k i e %.®M. 1 3 £IWttJ ft Then, HTML file for service is edited by step S7, 

Coo k i e £r±$H~6 0 $5</> and Cookie and HTML file are sent to user 

X^T yZf.Sl K £$ -V— \f 7. terminal 2 of requester. 

(Dtz#> OH TM L 7 7>f /w£Jg 
ft U C o o k i e^HTML 



[0 0 3 1] 

W i 2,©M7o-ft-> 
i^-.trx t°p^7 'AT. Tfch'Pf- 
1 l tc"<fc U , -il#^;ft7cffi« 

-g-K ih CO tc ib jD u v. ? ft 

■7°s. l. 3 t'ij, w^:as c^-ii- 
§-^jrT£ 2°.7^ it:,: *;ric* 

i Mi"o " xt v?:s 1 5 
^ i" 8 ©sfc^*# sfrSB&it <& 

^9. A 1 1 L 



[0031] 

FIG. 4 is a processing flowchart of 
consecutive-number management part 12 
shown in FIG. 1. 

If call appearance of the consecutive-number 
management part 12 is carried out from service 
program 11, it will cover lock for competition 
prevention of read-write over 
consecutive-number maximum-value 
management file 18 by step S11 first. 
Next, in step S12, maximum value of 
consecutive number stored now is read from 
consecutive-number maximum-value 
management file 18. 

In step S13, 1 is added to read consecutive 
number and the value is returned to 
consecutive-number maximum-value 
management file 18 by step S14. 
Next, in step S15, lock of read-write competition 
prevention of consecutive-number 
maximum-value management file 18 is 
released, consecutive number is notified to 
service program 11, and processing is 
completed. 
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[0 0 3 2] [0032] 

HI 5 (A) f± f ElKCTFt" Co FIG.5(A) is a processing flowchart of Cookie 

okie 1 3 <D$&M7 o generation part 13 shown in FIG 1. 

u fir-Ft*fe5o Cook i Cookie generation part 13 edits data for 

e 1 3 f±, tr* :/p Cookie-izing into 1 data structure in step S21 by 

^7Ai li^CCook i e Cookie generation request from service 

±f$^mz£V, tL-fXT-y? program 11 first. 

S 2 1 {cfc^TC o o k i e{t Next, in step S22, signature creation * 

MMt^r — $ & 1 t — ^W3s(^lB verification part 15 is called, and digital 

Mir&o ^y^y^'S 2 2 signature is made to data structure of data for 

-Cfi, . m%jfrf& • 4&tiE£tf 1 5 £ Cookie-izing. 

(WfcUU C o o k i eitMM Then, in step S23, data structure of data for 

T^^OT^PWlk^MLXf 1 ] Cookie-izing and digital signature are 

i/ # /I'lr^i £ f|^$ci~ 5 o MV^. compounded, and it enciphers by encryption * 

t^r^/S 2 3^ft, ;Co o decoding part 16, and is referred to as Cookie 

k i e ikMMy**-?. ©z.- ^ M which sends the result. 

x , m m^bM i s is x 

5 C. o o k i e t^/b.o 

[0 0 3 3] [0033] 

1215 (B) fi, El l tT^'f Co FIG.5(B) is a processing flowchart of Cookie 

o k i e ^tEf IS 1 4 7 ri verification part 1 4 shown in FIG. 1 . 

— ^-r — h "t: 6o C o o k i Cookie verification part 14 decodes Cookie first 

: e'Wn£M 1 4 |«t, ' received from user terminal 2 in step S31 by 

^7A1 l^&OC o oi i e Cookie verification request from service 

^fiEil^^cfc "9 , Ar ^ 7" program 11 by encryption * decoding part 16. 

S3i iiJo^tilfg^2^ In step S32, data structure of data for 

&§(iKof:C o o k i e §rlt Cookie-izing of result and digital signature 

^rit - M^itU X 6 CiotS which were decoded are extracted, and it is 

:*H~5.o'. AT^ /S 3 2 "CTi, verified by step S33 whether digital signature is 

m% Ltc^(D Co o k i.e| rightful. 

MM'r'— ^.©x- ^Hit £ 71 ^ By step S34, verification result is judged, if 

$ >VM%> £rftfctJ WlAT 1 "* 7l verification result is O.K., return coding of 

S 3 3 Verification O.K. will be set up by step S35, and 
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# s jE^T*fc<5fr»£ > 5 ' #*&rtfcIiEi~ verification success will be reported to service 

5„ *7-y?S 3 41c £9, ^ program 11. 

SEte*&'^J;£U~&SEi!§IM s '0 If verification result is NG, return coding of 

KXfotblt, *t sft?°S 3 5 (c Verification NG will be set up by step S36, and 

J; <9 $1110 Ktf) U y^— Y verification failure will be reported to service 

§r^!^lt, f— k^7 P q..^5; program 11. 

jfcfe!iEi!£*# N G T'fctUi*, ~7sT 
•y 7°S 3 6 J: ^fENGO"!^ 

[0 0 3 4] [0034] 

jfcfcj, f-k^yp^yAl 1 Furthermore, in service program 11, 

-Cfi, ZW&%-L1tC o o. k .i consecutive number which provided uniquely 

e Co^tf^^^'f^ for every request besides verification by digital 

Sfc'SE&lJ^, M&Z b \z.—M signature about this decoded Cookie performs 

X,1tEM^%&£$MM verification of whether to be duplication request. 

[ 0 0.3 5 ] [0035] 

[MM©«] [ADVANTAGE OF THE INVENTION] 

Vklfflft L.fc J; 5 K',. W & In provision of WWW service which, as 

£f^;MM% J ^WE^7M explained above, controls transition of service 

IWliSGo o 'kTejiT 1 ? provision to user by Cookie according to this 

Mfl^-SWWWiF — tC^^ffittf invention, alteration of Cookie by user, and 

V ^ X , MJ%%\t X%> C o o disturbance to normal implementation of service 

k i e <D$t g U'C o o k by copy of Cookie, by adding digital signature to 

i e©3 t°— (ci^lf— t'Xco Cookie, it can detect now in computer which 

lE'W>^'MM^<DWj'^- : k , C o o provides service, and, furthermore, data 

k i elif-f^ £: ttfiti structure of Cookie is concealed using encoding 

t t id «fc 9 f-— fcf technology, by maintaining key used for digital 

-f'-Sft^'i^&^T'l&tBi'S - signature and encryption only to computer 
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btfTif%nzt£ V) , £ bKVfe J %-& which provides service, WWW service can be 
I^I^TCook i e <D 7 s '— provided now with high security. 

- ^ * & m&i- mmm^<D?t 

* =l V t 4 tWWWt-k*7 £ 

[BRIEF DESCRIPTION OF THE DRAWINGS] 



imi] [Fiai] 

^ & ^Mf 5 V * r.AWl It is figure showing example of composition of 
MM h "%> o system which implements this invention. 



[02] [FIG 2] 

WM^<D—MMMM^>^&WL It is figure for illustrating effect of one 
JjEi-<5 tzfr (DMX\hZ).o embodiment of this invention. 



[13 ] [FIG, 3] 

Wrr^x $5 M^MMr7 r ^ It is processing flowchart of service program. 



[i 4 ] [FIG. 4] 

^ ^#^fr S §1$ ©Il7.n ~ f~ It is processing flowchart of 
^ — ; F "C.fc So consecutive-number management part. 



[MS 1 [FIG. 5] 

C o ok i e^KCook It is processing flowchart of Cookie generation 

i e tiklJE^fD^M 7n-f part and Cookie verification part. 

I^^'fft W 1 [DESCRIPTION OF SYMBOLS] 

1 WWWf-t^l:lM 1 Computer which provides WWW service 



12/26/2003 



24/33 



(C) DERWENT 



JP11-98134-A 



5fH 
l 1 
1 2 
1 3 
1 4 
1 5 
1 6 
1 7 

1 8 

2 

2 1 
2.2 
2 3 
2 4 
3 



Cookie 
Coo k i e&tiEgB 

H T T Pf-* 

C o o k '.i . 'e W&^gG 
Coo k I eMiZfyM 
Coo k .i efejWSS 
Coo k i e 
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11 Service program 

1 2 Consecutive-number management part 

1 3 Cookie generation part 

14 Cookie verification part 

1 5 Signature creation * verification part 

16 Encryption * decoding part 

17 HTTP daemon 

1 8 Consecutive-number maximum-value 
management file 

2 User terminal 

21 Browser 

22 Cookie write-in part 

23 Cookie reading part 

24 Cookie storing part 

3 Cookie 



[MI] 



[FIG 1] 




Computer which provides WWW service 
Service program 
Consecutive-number management part 

13 Cookie generation part 

14 Cookie verification part 
Signature creation * verification part 
Encryption * decoding part 

17 HTTP daemon 

1 8 Consecutive-number maximum-value management file 



1 

11 
12 



15 
16 
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2 User terminal 

21 Browser 

22 Cookie write-in part 

23 Cookie reading part 

24 Cookie storing part 

3 Cookie 



[B3] [FIG 3] 




Processing flowchart of service program 
Start 

S1-initial-stage access? 

S2 -number providing 1 consecutive number. 

53- Cookie verification 

54- verification O.K. 

55- service stop 

56- Cookie generation 

57- service HTML edit 
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m 4 ] [FIG. 4] 



( m 








S 1 1 


BEft*»ttdl&ib 
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1 3 


r _.. . .J 
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r ^ — ' 


±12<IS£HI#J§**iiiBJI 






„S 1 5 













Processing flowchart of consecutive-number management part 
Start 

S11- Consecutive-number maximum-value management file read-write 
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competition prevention 

512- Consecutive-number maximum-value management file reading 

513- 1 is added to consecutive number. 

514- The above-mentioned value is written in consecutive-number 
maximum-value management file. 

515- Consecutive-number maximum-value management file read-write 
competition prevention releasing 

Completion 



[El 2 ] 



[FIG. 2] 
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2-\ mmtsu*. 



— {y-i>Ba?&gi] — > 




J o ok 1 e 



<= 



1 g|ftl 




ife^y-A HTML 




///////A 

Cookie 




mm* 



^0* 



■ -astern 




) Wu^y-A HTML 



1 - Computer which provides WWW service 

2- User terminal 
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- start request for games--> 
Consecutive number 
The following area number 
The total acquiring point 
--> signature secret key 
Digital signature 
Encryption | Code following 

game implementation <-- point game HTML 
I 

Acquiring point (20) 
3- 

Encryption | Encryption key 
Series code 

The following area number 

Acquiring point (D) 

<--> signature verification key 

Digital signature 

Encryption | Encryption key 

game implementation <-- point game HTML 
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S2 1 
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( B) Co o k i e ftliESB 



( m ) 





S3 1 

/ / — 


Cooki 
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^S32 


Cooki e ^bJtft 






,S3 3 







,S3 4 



S35 



NO 
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:•/ ■ NG 
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(A) Cookie generation part 
Start 

Data for formation of S21 -Cookie are edited into 1 data structure. 
Digital signature creation of the S22-above-mentioned data structure 
S23-data structure and digital signature are compounded and it enciphers. 
Completion 



(B) Cookie verification part 
Start 

531- Cookie is decoded. 

532- Data structure for Cookie-izing and digital signature are extracted. 

533- Digital signature is verified. 



12/26/2003 



31/33 



(C) DERWENT 



DERWENT 

534- Verification O.K. 

535- Return coding O.K. 

536- Return NG 
Completion 
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Dement shall not in any circumstances be liable or responsible for the 
completeness or accuracy of any Derwent translation and will not be liable for any 
direct, indirect, consequential or economic loss or loss of profit resulting directly or 
indirectly from the use of any translation by any customer. 

Derwent Information Ltd. is part of The Thomson Corporation 

Please visit our home page: "WWW.DERWENT.CO.UK" (English) 

"WWW.DERWENT.CO.JP" (Japanese) 
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